lkml.org 
[lkml]   [2014]   [Nov]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Subject[RFC PATCH 0/4] Namespace contrained helper execution
From
Date
Hi all,

Some time ago an attempt was made to update call_usermodehelper()
to execute within it's namespace.

Comments at the time were basically that the approach didn't go
nearly far enough to constrain the process.

This series attempts to remedy that by taking care to create an
appropriate namespace environment then switch to it and setup
fs_struct for path walking prior to the user mode helper thread
runner calling do_execve().

Please review and comment on the patch series.
Ian

---

Benjamin Coddington (1):
KEYS: exec request-key within the requesting task's namespace

Ian Kent (3):
vfs - fs/namespaces.c: break out mntns_setfs() from mntns_install()
nsproxy - make create_new_namespaces() non-static
kmod - add call_usermodehelper_ns() helper


fs/namespace.c | 41 ++++++++++++++++++++++++++++-----------
include/linux/kmod.h | 17 ++++++++++++++++
include/linux/mount.h | 1 +
include/linux/nsproxy.h | 3 +++
kernel/kmod.c | 39 +++++++++++++++++++++++++++++++++++++
kernel/nsproxy.c | 2 +-
security/keys/request_key.c | 45 +++++++++++++++++++++++++++++++++++++------
7 files changed, 129 insertions(+), 19 deletions(-)

--
Signature


\
 
 \ /
  Last update: 2014-11-25 02:41    [W:0.108 / U:0.112 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site